עדכוני פרטיות - נובמבר

Google agrees to settle for almost $392 Million for  Privacy issues, mainly concerning Location-tracking

According to the attorneys general, this is the largest consumer privacy settlement in US history, with a 40-state coalition of attorneys general. 

$392 million settlement, over allegations against the company’s location tracking practices - mostly, misleading users to believe location tracking were off, when Google kept amassing location data on users through various sources. 

Last month, Google separately settled a similar location tracking lawsuit with Arizona for $85 million. Google faces additional lawsuits brought by Washington, D.C., Indiana and Texas for deceptive location tracking. Read more - Google Agrees to $392 Million Privacy Settlement With 40 States - The New York Times

CNIL Sanctions DISCORD INC. 800,000 euros for GDPR violations

The amount of this fine was decided with regard to the breaches identified, the number of people concerned, and considering the efforts made by the company to comply throughout the procedure. 

The material violations revolve around Retention periods and purpose limitations, A breach of the obligation to inform, ensuring security, conducting a Data protection impact assessment, and most interesting - violation of Privacy by design principles. Apparently, when a user had used the top right ‘X’ to close a voice channel window, it kept running in the background, which may lead to users being overheard by other members present in the voice channel when they thought they had left it. Read more here: Sanction de 800 000 euros à l’encontre de la société DISCORD INC. | CNIL 

Digital Markets Act and Digital Services Act come into force

Both acts, DSA and DMA strive to tighten online safeguards with the aim to fully harmonize the rules on the safety of online services and the dissemination of illegal content online.

The DSA is broad in reach and is intended to apply to a range of key players across the digital ecosystem (online intermediaries, hosting services, online platforms) and has specific categories and requirements for VLOP - very large internet platforms. 

The DMA defines when a large online platform qualifies as a “gatekeeper”. These are digital platforms that provide an important gateway between business users and consumers – whose position can grant them the power to act as a private rule maker, and thus creating a bottleneck in the digital economy. To address these issues, the DMA will define a series of obligations they will need to respect, including prohibiting gatekeepers from engaging in certain behaviours.

‍